漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
N/A
Vulnerability Description
A buffer over-read was discovered in libntlmauth in Squid 2.5 through 5.6. Due to incorrect integer-overflow protection, the SSPI and SMB authentication helpers are vulnerable to reading unintended memory locations. In some configurations, cleartext credentials from these locations are sent to a client. This is fixed in 5.7.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Squid 输入验证错误漏洞
Vulnerability Description
Squid是一套代理服务器和Web缓存服务器软件。该软件提供缓存万维网、过滤流量、代理上网等功能。 Squid存在输入验证错误漏洞。攻击者利用该漏洞可以通过 SSPI / SMB 身份验证强制读取 Squid 缓存的无效内存地址，以触发拒绝服务或获取敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A